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AMENDMENTS TO THE CLAIMS : 

This listing of claims will replace all prior versions, 
and listings, of claims in the application: 

LISTING OF CLAIMS : 

1-8. (canceled) 

9. (currently amended) A method for capturing the 
utilization behavior of an Internet/Intranet subscriber, oo that 
comprising the steps: 

[ [- the]] recording subscriber data i-s — logged over a 
specific time period^, 

[ [-] ] analyzing the recorded subscriber data 4r3- 
analyzed using at least e^e two of the following methods: 

• [ [the] ] rule-based method_^ 

• [ [the] ] neural network - supervised learning_^ 

• density-based profile modeling ; and 

• [ [the] ] causal network ; and 

■ifi — ouch — a — wety — that — a- assigning said subscriber 
aooigncd to a category of utilization behavior in accordance with 
their — oubocriber — behavior results from said at least two 
analyzing methods . 

10. (previously presented) The method as claimed in 
claim 9, characterized in that the subscriber data is derived 
from at least one of the following data types: RADIUS data, SNMP 
data, TCP dump protocol data. 
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11. (currently amended) The method as claimed in claim 
9, charactGrigod — ifi — that — fe**e — oubocribor — data — is — aub joGtcd — ^ 
comprising the further step of performing a preprocessing step of 
rule-based prQproccooing analyzing of the subscriber data before 
analyoio the analyzing step . 

12. (currently amended) The method as claimed in claim 
11, characterized in that the preprocessing step is performed 
while the subscriber data subjcctod — fee — proproGODQing is hold 
stored in an interim storage unit before analyoio the analyzing 
step . 

13. (currently amended) The method as claimed in claim 
11, characterized in that in accordance with the analyoio rcoult 
e^- results from said at least one of tho two analyzing methods, 
[ [the] ] selection rules are automatically adjusted for the 
preprocessing of the subscriber data. 

14 . (canceled) 

15. (currently amended) The method as claimed in claim 
9, characterized in that the results — analyoco from the 
individual at least two analyzing methods used in a current 
monitoring period and the results from the at least two analyzing 
methods from a past monitoring period are combined to provide a 
final result. 
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